Learn how to perform correlations and create rules to detect malicious activity and identify and correlate behaviors. Event Query Language (EQL) provides robust data processing and analysis capabilities that are ideal for hunting threats, investigating suspicious activity, and scoping incidents.
Platform
Use cases
Customers
Stories By Use Case
Help Center
Resources
Learn
Engage
